Data Protection Trustmark Certification

The Data Protection Trustmark (DPTM) is a voluntary enterprise-wide certification for organisations to demonstrate accountable data protection practices. The DPTM will help businesses increase their competitive advantage and build trust with their customers and stakeholders.

The directory of DPTM-certified organisations can be found here (2.54MB).

The DPTM is now part of the national Singapore Standards (SS), elevating the level of recognition for organisations which obtain DPTM-certification. It is updated to better support organisations in staying future-ready and meeting evolving data protection needs. The revised DPTM will offer:

• Updated language to clarify the requirements for organisations seeking certification
• A streamlined certification experience where organisations can work with one certification body throughout their certification journey
• Professional assessments conducted by bodies overseen by the Singapore Accreditation Council
• Annual surveillance audits to enhance confidence in the organisation’s data protection practices and demonstrate continued commitment to data protection

Organisations may obtain a copy of the Data Protection Trustmark SS 714:2025 from the Singapore Standards e-shop.

The certification process is undertaken by certification bodies that have been appointed by IMDA.

The Certification Body acts as an independent body to assess that an organisation’s data protection practices conform to the DPTM requirements. Organisations may select any of the following seven certification bodies:

1. Organisations can refer to this mapping document (363.05KB) to see how the previous DPTM requirements are mapped to the new standard.
2. Organisations can refer to this implementation guide (704.41KB) which provide a guided approach on the implementation of accountable data protection policies and practices to meet the requirements of the SS714:2025.

For Organisations

Organisations can consider applying to Enterprise Singapore (ESG) to seek subsidy support for DPTM certification and consultancy services. Details on the eligibility criteria and application process can be found at ESG Enterprise Development Grant and this Quick Guide on Enterprise Development Grant Application.

For Social Service Agencies and Charities

Social service agencies (SSAs) and charities can consider applying to the National Council of Social Service (NCSS) for funding support. Details on the eligibity criteria and application process can be found at NCSS Tech-And-GO!

• APEC Cross-Border Privacy Rules System
• APEC Privacy Recognition for Processors System 
• DPTM for consumers
• DPTM Success Stories
• Global Cross-Border Privacy Rules System
• Global Privacy Recognition for Processors System

Have more? Check out our FAQs for more details.

For general queries, please email Data_Protection_Certifications@imda.gov.sg or call 6377 3800.